Director, Security Platform Operations

About Northern Trust
As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.
Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.
With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.
he Director, Security Platform Operations is a people leader responsible for the production ownership, reliability, support and lifecycle management of Northern Trust’s enterprise cybersecurity platforms. The Director establishes the global operating model, develops a scalable and geographically distributed team, and ensures that accepted platforms consistently meet service, control, resilience and regulatory expectations.
This Director serves as the organization’s chief operator for security platforms. The role partners closely with Security Platform Engineering, Cloud Security Engineering, Infrastructure, Network, Service Management, Risk and Audit. Security Platform Engineering remains accountable for new capabilities and material change until Security Platform Operations formally accepts the service through the Production Acceptance Gate. Following acceptance, Security Platform Operations owns day-to-day service health, routine administration, support, minor enhancements and continuous service improvement, while Engineering remains accountable for material change and L3 escalation.
What You'll Do
Lead Global Security Platform Operations
Lead, coach and develop a globally distributed team responsible for operating enterprise security platforms, with a significant delivery presence in India and follow-the-sun support expectations.
Establish clear service ownership, tiered support responsibilities, escalation paths, on-call expectations and decision rights across platform teams.
Create a natural career progression for security operations professionals through defined roles, competencies, technical development and leadership opportunities.
Set operational goals and performance measures covering availability, service levels, incident restoration, problem reduction, backlog health, lifecycle compliance and customer experience.
Drive an automation-first and SRE-aligned operating culture that reduces manual effort, recurring incidents and operational risk.
Own Production Services and Operational Outcomes
Assume accountable production ownership for security platforms after formal operational acceptance.
Own platform health, availability, monitoring, alerting, capacity, resilience, performance, licensing, certificates, secrets and service dependencies.
Lead incident, problem, request and change management for the security platform portfolio, including timely restoration and root-cause remediation.
Own vendor support cases, escalation management, maintenance schedules, lifecycle planning, end-of-life remediation and operational risk tracking.
Ensure routine administration, standard configuration changes, patching, upgrades and recurring maintenance are executed through documented and controlled procedures.
Maintain accurate service records, ownership data and dependencies in ServiceNow ITSM and CMDB where applicable.
Govern the Production Acceptance Gate
Define and enforce the Production Acceptance Gate used to transfer new or materially changed security capabilities from Security Platform Engineering into Security Platform Operations.
Confirm that production architecture, configuration baselines, integrations, dependencies, monitoring, alerting, access models and recovery expectations are complete and supportable.
Require validated runbooks, ticket routing, vendor contacts, escalation procedures, SLO/SLI definitions, failure and recovery procedures, knowledge transfer and support training before acceptance.
Accept, conditionally accept or reject a transition based on documented operational-readiness criteria; prevent incomplete capabilities from being transferred into Operations by default.
Ensure acceptance decisions, residual risks, exceptions and post-transition stabilization actions are documented and governed.
Manage Minor Enhancements and the Engineering Boundary
Own minor enhancements and low-risk configuration changes that remain within approved architecture, control intent and established platform patterns.
Establish practical criteria that distinguish routine operational change and minor enhancement from major feature enablement, new integrations, architecture changes and platform replacement.
Route material changes to Security Platform Engineering while providing operational requirements, production data, testing support and deployment readiness input.
Maintain an operational enhancement backlog and prioritize work based on service risk, user impact, control effectiveness, effort and regulatory commitments.
Ensure changes are tested, documented, approved and reflected in runbooks, monitoring and support processes.
Drive Service Improvement, Governance and Assurance
Use incidents, recurring tickets, control gaps, capacity trends and stakeholder feedback to drive measurable service improvement.
Define, review and communicate metrics on SLO attainment, availability, incident restoration, recurring problems, ticket aging, change success, backlog health, lifecycle compliance, automation and platform risk.
Ensure audit and regulatory support is delivered with strong evidence quality, traceability, repeatable operations and clear ownership across PCI DSS, SOX, GLBA, OCC/FFIEC and related expectations.
Own operational documentation, service reviews, risk and control reporting, executive updates and remediation plans for the platform portfolio.
Partner with Finance, Procurement and Vendor Management on licensing, renewals, consumption, support agreements and cost optimization.
What You'll Bring
15+ years of experience in information technology, cybersecurity, infrastructure, network security, service operations, SRE, platform engineering or related disciplines, with 5+ years leading enterprise-scale teams or major security operations programs.
Proven people leadership capability, including setting direction, developing talent, assigning work, managing priorities, coaching leaders and senior specialists, and creating accountability for operational outcomes.
Demonstrated experience operating business-critical security platforms in a complex, highly regulated enterprise.
Strong command of ITIL-aligned service management, incident and problem management, change governance, service transition, operational resilience and SLO/SLI practices.
Experience establishing production-readiness criteria, accepting services into operations and managing clear boundaries between engineering and operations.
Deep familiarity with vulnerability management, zero trust, network security, SASE / SSE, web security, SaaS security and associated enterprise operating models.
Excellent executive communication skills, including the ability to explain service risk, control tradeoffs, investment needs, operational performance and remediation priorities.
Ability to balance service reliability, regulatory commitments, operational backlog, team capacity and stakeh

Skills
Wealth Management, Procurement, Vendor Management, Documentation